Vulnerability of the host1x_drm_probe() function in the drivers/gpu/drm/tegra/drm.c module – This driver provides support for Linux’s Direct Rendering Infrastructure (DRI), allowing attackers to cause system failures.

Vulnerability of the host1xdrmprobe function in the drivers/gpu/drm/tegra/drm.c module – The driver for Linux’s Direct Rendering Infrastructure DRI has a vulnerability related to incorrect checking of the return value of the function. Exploiting this vulnerability could allow an attacker to cause...

CVE-2025-11788

Heap-based buffer overflow vulnerability in Circutor SGE-PLC1000/SGE-PLC50 v9.0.2. In the 'ShowSupervisorParameters' function, there is an unlimited user input that is copied to a fixed-size buffer via 'sprintf'. The 'GetParametermeter' function retrieves the user input, which is directly...

Uncaught Exception

Overview getgrav/grav is a Modern, Crazy Fast, Ridiculously Easy and Amazingly Powerful Flat-File CMS. Affected versions of this package are vulnerable to Uncaught Exception via improper validation of the Supported parameter in the admin configuration panel. An attacker can cause the application ...

CVE-2025-54849

A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted series of network requests can lead to a denial of service. An attacker can send a sequence of unauthenticated packets to trigger this...

Socomec DIRIS Digiware M-70 Modbus TCP reboot denial of service vulnerability

Talos Vulnerability Report TALOS-2024-2119 Socomec DIRIS Digiware M-70 Modbus TCP reboot denial of service vulnerability December 1, 2025 CVE Number CVE-2024-48882 SUMMARY A denial of service vulnerability exists in the Modbus TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially...

The vulnerability of the SROOT component in NVIDIA DGX OS workstations for artificial intelligence DGX Spark allows a attacker to execute arbitrary code, cause system failures, or gain unauthorized access to protected information.

The vulnerability of the SROOT component in NVIDIA DGX OS workstations for DGX Spark AI systems is related to an unvalidated return value, which leads to the dereferencing of a zero pointer. Exploiting this vulnerability could allow an attacker to execute arbitrary code, cause service failures, o...

ASB-A-352518318

In findAvailRecognizer of VoiceInteractionManagerService.java, there is a possible way to become the default speech recognizer app due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

RHEL 8 : xorg-x11-server (RHSA-2025:22426)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:22426 advisory. X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical us...

RHEL 8 : xorg-x11-server (RHSA-2025:22427)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:22427 advisory. X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical us...

OSV-2025-955 Use-of-uninitialized-value in decoder_context::construct_reference_picture_lists

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=464323256 Crash type: Use-of-uninitialized-value Crash state: decodercontext::constructreferencepicturelists decodercontext::processslicesegmentheader decodercontext::readsliceNAL...

CVE-2025-65499

A flaw was found in libcoap. A remote attacker can cause a denial of service via a NULL pointer dereference due to improper handling of the return values of OpenSSL functions during DTLS Datagram Transport Layer Security operations...

CVE-2025-65498

A flaw was found in libcoap. A remote attacker can cause a denial of service via a NULL pointer dereference due to improper handling of the return values of OpenSSL functions during DTLS Datagram Transport Layer Security operations...

CVE-2025-65496

A flaw was found in libcoap. A remote attacker can cause a denial of service via a NULL pointer dereference due to improper handling of the return values of OpenSSL functions during DTLS Datagram Transport Layer Security operations...

PT-2025-48337

Name of the Vulnerable Software and Affected Versions HCL Technologies Ltd. Unica version 12.0.0 Description A CSV formula injection issue exists in HCL Technologies Ltd. Unica. The issue allows for potential manipulation through crafted CSV files. Recommendations At the moment, there is no...

The vulnerability of the management tool for SNMP systems in centralized network device and port management solutions from Advantech iView allows a hacker to execute arbitrary code.

The vulnerability of the SNMP management tool for centralized network device and port management systems from Advantech iView relates to the lack of protection for the SQL query structure during the processing of the ztpsearchvalue parameter. Exploiting this vulnerability allows a malicious actor...

Apache Kvrocks 安全漏洞

Apache Kvrocks is a distributed key-value NoSQL database from the Apache USA Foundation. Apache Kvrocks suffers from an elevation of privilege vulnerability that is caused by improper privilege management in the RESET command. An attacker can exploit this vulnerability to gain administrator...

The vulnerability of the Grub2 operating system loader, related to the pointer being set to expired, allows a hacker to trigger a service failure.

The vulnerability of Grub2 operating system loaders is related to the pointer being set to an expired value. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2025-12140

The application contains an insecure 'redirectToUrl' mechanism that incorrectly processes the value of the 'redirectUrlParameter' parameter. The application interprets the entered string of characters as a Java expression, allowing an unauthenticated attacer to perform arbitrary code execution...

CacheTrap: Injecting Trojans in LLMs without Leaving Any Traces in Inputs or Weights

Adversarial weight perturbation has emerged as a concerning threat to LLMs that either use training privileges or system-level access to inject adversarial corruption in model weights. With the emergence of innovative defensive solutions that place system- and algorithm-level checks and correctio...

AMD uProf Return Value Mishandling Vulnerability

AMD uProf is a suite of performance analysis tools from AMD for analyzing the performance of x86 architecture applications on Windows, Linux and FreeBSD systems. A return value mishandling vulnerability exists in AMD uProf, which can be exploited by an attacker to cause a KSLR bypass and loss of...